CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
What the vulnerability does
Missing Authorization vulnerability in heoLixfy Flexible Woocommerce Checkout Field Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Woocommerce Checkout Field Editor: from n/a through 2.0.1.
Explanation of Vulnerability in Simple Terms
The Flexible Woocommerce Checkout Field Editor plugin for WordPress lacks proper authorization checks, allowing unauthenticated attackers to modify checkout fields and potentially inject malicious content. An attacker can alter form data without logging in, affecting site integrity and customer trust. Update immediately to a patched version.
What an attacker can do
Modify WooCommerce checkout fields and inject malicious content without authentication.
Potential impact on your site
Attackers can alter checkout forms, inject phishing content, or disrupt customer transactions without your knowledge.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
